Ledger Live Beta[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Ledger Live Beta.exe
Size 54.2MB
Sample260820-ef2nyabc68
SHA256 ae51e0eb0aa1079f4b8c3904cf6076ea338ada1a82f9c5b228f73dc06951f5d0
MD5 9026b4f210d8090618019ed2366863e3
SHA1 fabf0b2c73b25daf5c285a460bf1f41d34470ee3
SHA512 014f52718930b729eca426c8d14d180df648efc4b07d98195368ac1ef76786a13ce380f8eb301b87127e8f5513ef7344dcf343a752e3a8c6cc5b16b0b83a1b0c
SSDEEP 393216:fR9rrXTRddSenbJGSLxDPcHGYjx9oKlQnAliXUxR0rHa93WhlU6tTsRQaoqk8BbF:fTjTdSUxGHrxdwiHFk8BbF
TLSH
T143C76C03BA9B18DAD0AAC870C3D646638A617CC71B35B5EF51C52B252F7ABF05B39314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ledger Live Beta.exe

File Explorer

Ledger Live Beta.exe

.exe 54.2MB

Ledger Live Beta.exe

IMPHASH 7ce9ce8243710d2b144ab7c3559d3504
SHA256 ae51e0eb0aa1079f4b8c3904cf6076ea338ada1a82f9c5b228f73dc06951f5d0
MD5 9026b4f210d8090618019ed2366863e3
SHA1 fabf0b2c73b25daf5c285a460bf1f41d34470ee3
SHA512 014f52718930b729eca426c8d14d180df648efc4b07d98195368ac1ef76786a13ce380f8eb301b87127e8f5513ef7344dcf343a752e3a8c6cc5b16b0b83a1b0c
SSDEEP 393216:fR9rrXTRddSenbJGSLxDPcHGYjx9oKlQnAliXUxR0rHa93WhlU6tTsRQaoqk8BbF:fTjTdSUxGHrxdwiHFk8BbF
TLSH
T143C76C03BA9B18DAD0AAC870C3D646638A617CC71B35B5EF51C52B252F7ABF05B39314
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31301424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\deno\deno\target\release\deps\deno.pdb

powrprof

CallNtPowerInformation

iphlpapi

GetAdaptersAddresses

ntdll

NtCancelIoFileEx RtlPcToFileHeader RtlUnwindEx RtlNtStatusToDosError RtlCaptureStackBackTrace RtlDeleteFunctionTable RtlAddFunctionTable VerSetConditionMask RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext NtCreateFile NtDeviceIoControlFile RtlUnwind

bcrypt

BCryptGenRandom

advapi32

EventSetInformation RegOpenKeyExW RegEnumKeyExW RegQueryInfoKeyW EventWriteTransfer RegQueryValueExW EventRegister RegCloseKey SystemFunction036

d3dcompiler_47

D3DCompile

dbghelp

SymGetModuleBase64 SymSetOptions SymGetLineFromAddr64 SymFromAddr SymInitialize SymFunctionTableAccess64 StackWalk64 SymSetSearchPathW SymGetSearchPathW

kernel32

GetFileSizeEx GetUserDefaultLCID IsValidLocale HeapSize GetConsoleOutputCP IsValidCodePage GetACP GetOEMCP FindFirstFileExW SetStdHandle GetStringTypeW OutputDebugStringW SetEndOfFile EnumSystemLocalesW CreateEventW GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetCommandLineA GetCPInfo FreeLibraryAndExitThread ExitThread EnterCriticalSection AcquireSRWLockExclusive LeaveCriticalSection AddVectoredExceptionHandler SetThreadStackGuarantee GetLastError GetProcessHeap HeapAlloc GetCommandLineW HeapFree CloseHandle WaitForSingleObject GetExitCodeProcess SwitchToThread ReleaseSRWLockExclusive lstrlenW GetCurrentProcessId SetConsoleMode SetConsoleCursorPosition HeapReAlloc GetStdHandle GetFileInformationByHandleEx GetConsoleMode AcquireSRWLockShared ReleaseSRWLockShared WakeAllConditionVariable SleepConditionVariableSRW Sleep GetProcAddress LoadLibraryExW FindClose SetCurrentDirectoryW SetEnvironmentVariableW GetEnvironmentStringsW FreeEnvironmentStringsW SetErrorMode SetThreadErrorMode LoadLibraryW OpenProcess TerminateProcess RegisterWaitForSingleObject GetProcessId CreateToolhelp32Snapshot Process32First Process32Next ReadFile GetConsoleScreenBufferInfo CreateEventA ResetEvent WaitForMultipleObjects FreeLibrary SetFileTime TryAcquireSRWLockExclusive GetOverlappedResult WriteFile CancelIoEx SetFileCompletionNotificationModes CreateIoCompletionPort GetQueuedCompletionStatusEx PostQueuedCompletionStatus WaitForSingleObjectEx CreateFileW CreateSemaphoreW ReadDirectoryChangesW ReleaseSemaphore CancelIo GetSystemInfo GetModuleHandleA SetFileInformationByHandle GetConsoleCursorInfo SetConsoleCursorInfo ReadConsoleInputW FillConsoleOutputCharacterA FillConsoleOutputAttribute GetFileInformationByHandle TlsGetValue TlsSetValue SetLastError GetEnvironmentVariableW WriteConsoleW GetCurrentProcess GetCurrentThread ReleaseMutex GetCurrentDirectoryW LoadLibraryA CreateMutexA TlsAlloc GetModuleHandleW FormatMessageW GetTempPathW GetModuleFileNameW DeviceIoControl FlushFileBuffers DuplicateHandle GetFinalPathNameByHandleW SetFilePointerEx FindNextFileW CreateDirectoryW ReadConsoleW InitializeCriticalSection TryEnterCriticalSection SetHandleInformation CreateProcessW CreateNamedPipeW SetEvent ExitProcess QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimeAsFileTime FindFirstFileW DeleteFileW MoveFileExW RemoveDirectoryW CreateSymbolicLinkW CreateHardLinkW SetFileAttributesW CopyFileExW CreateThread UnregisterWaitEx SetConsoleTextAttribute GetSystemTimes GlobalMemoryStatusEx GetVersionExA GetLocaleInfoEx CreateFileA CreateFileMappingW MapViewOfFile UnmapViewOfFile GetTimeZoneInformation WideCharToMultiByte GetThreadTimes GetCurrentThreadId DeleteFileA GetTempPathA GetTempFileNameA GetFileType OutputDebugStringA VerifyVersionInfoW VirtualAlloc VirtualFree IsDebuggerPresent TlsFree QueryThreadCycleTime GetThreadPriority SetThreadPriority DeleteCriticalSection VirtualProtect MultiByteToWideChar WakeConditionVariable InitOnceExecuteOnce SetUnhandledExceptionFilter GetNativeSystemInfo GetDynamicTimeZoneInformation GetUserGeoID GetGeoInfoW InitializeConditionVariable OpenThread SuspendThread GetThreadContext ResumeThread CreateSemaphoreA ResolveLocaleName FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDateFormatEx GetTimeFormatEx GetCurrencyFormatEx GetNumberFormatEx InitializeSListHead GetModuleHandleExW EncodePointer InterlockedPushEntrySList RaiseException IsProcessorFeaturePresent GetStartupInfoW UnhandledExceptionFilter InitializeCriticalSectionAndSpinCount

ole32

CoTaskMemFree

shell32

SHGetKnownFolderPath

ws2_32

bind getaddrinfo freeaddrinfo WSAStartup WSACleanup recvfrom setsockopt getpeername recv send shutdown WSASend sendto listen WSASocketW getsockname getsockopt connect accept ioctlsocket socket WSAGetLastError WSAIoctl closesocket

winmm

timeGetTime

Name

.text

Size

30.1MB

Virtual Size

30.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

22.1MB

Virtual Size

22.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

115KB

Virtual Size

232KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

109KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Ledger Live Beta.exe

powrprof

iphlpapi

ntdll

bcrypt

advapi32

d3dcompiler_47

dbghelp

kernel32

ole32

shell32

ws2_32

winmm

generic